3501 matches found
Google Chrome FileSystem API Security Bypass Vulnerability
Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in the FileSystem API of Google Chrome versions prior to 40.0.2214.91. A remote attack exploiting this vulnerability could bypass the SafeBrowsing for Executable Files protection mechanism by creating an .ex...
UBUNTU-CVE-2015-1248
The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL...
Safari < 6.2.5 / 7.1.5 / 8.0.5 Multiple Vulnerabilities
Binary data 8696.prm...
chromium-browser: SafeBrowsing bypass
The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL...
CVE-2015-1128
The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...
CVE-2015-1127
The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...
Information disclosure
The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...
Design/Logic Flaw
The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...
CVE-2015-1127
CVE-2015-1127 affects WebKit’s private-browsing implementation. It places browsing history into an index, potentially allowing local users to read index entries and obtain sensitive information. Public fixes are present in vendor advisories: Safari updated to 6.2.5, 7.1.5, and 8.0.5; Linux distri...
CVE-2015-1128
The CVE-2015-1128 entry describes a vulnerability in Apple Safari’s private-browsing mode where push-notification requests can reveal a user’s browsing history. Affected products are Safari versions prior to 6.2.5, 7.x prior to 7.1.5, and 8.x prior to 8.0.5. Root cause: a flaw in how private brow...
CVE-2015-1128
The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...
CVE-2015-1127
The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...
CVE-2015-1127
The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...
Apple Safari Private Mode User Browsing History Indexing Vulnerability
Apple Safari is a popular WEB browser. A stateful management vulnerability in Apple Safari allows attackers to exploit the vulnerability to build malicious web pages, trick users into parsing them, and fail to properly index the user's browsing history in private mode, leading to the disclosure o...
Apple Safari Private Mode User Browsing History Leakage Vulnerability
Apple Safari is a popular WEB browser. A security vulnerability exists in Apple Safari, which can be exploited to disclose a user's browser history when responding to a push notification request in private browser mode. A remote attacker can exploit the vulnerability to obtain sensitive informati...
UBUNTU-CVE-2015-1127
The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...
APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 are now available and address the following: Safari Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite...
Google Adds Deceptive Software to Safe Browsing API
Google is continuing to refine its Safe Browsing API and now is giving users warnings about not just malicious software on sites they’re attempting to visit, but also about unwanted software. Google’s Safe Browsing API is designed to help protect users from a variety of threats on pages across th...
Onion.City — Search Engine for Deep Web that Works From Normal Web Browser
There is an entire section of the Internet that you probably don’t see on daily basis, it’s called the "Darknet" or "Deep Web", where all browsing is done anonymously. About a week ago, we reported about the 'Memex' Deep Web Search Engine, a Defense Advance Research Projects Agency DARPA project ...
Millet smart cameras small ants there is a remote command execution vulnerability-vulnerability warning-the black bar safety net
! t0167153064b2673d18. png Vulnerability description: Small ants Camera application management program the presence of a remote command execution vulnerability through the web interface with root privileges to execute arbitrary system commands without any web permissions, now the official latest...